| SHA256: | fd8d18817f4298a812ad130428f36ce72cba966aef7b7740a04f63ff47c21ac6 |
| File name: | fd8d18817f4298a812ad130428f36ce72cba966aef7b7740a04f63ff47c21ac6 |
| Detection ratio: | 15 / 70 |
| Analysis date: | 2019-01-20 01:02:54 UTC ( 1 month ago ) View latest |
| Antivirus | Result | Update |
|---|---|---|
| Acronis | suspicious | 20190119 |
| AVG | FileRepMalware | 20190119 |
| Bkav | HW32.Packed. | 20190119 |
| CrowdStrike Falcon (ML) | malicious_confidence_100% (D) | 20181023 |
| Cybereason | malicious.731a79 | 20190109 |
| Cylance | Unsafe | 20190120 |
| eGambit | Unsafe.AI_Score_57% | 20190120 |
| Endgame | malicious (high confidence) | 20181108 |
| Sophos ML | heuristic | 20181128 |
| McAfee-GW-Edition | BehavesLike.Win32.Emotet.ch | 20190119 |
| Qihoo-360 | HEUR/QVM20.1.A955.Malware.Gen | 20190120 |
| Rising | Trojan.Kryptik!8.8/N3#91% (RDM+:cmRtazq/u3aLsisKguQYrF1kMJFR) | 20190119 |
| SentinelOne (Static ML) | static engine - malicious | 20190118 |
| Symantec | ML.Attribute.HighConfidence | 20190119 |
| Trapmine | malicious.high.ml.score | 20190103 |
| Ad-Aware | 20190119 | |
| AegisLab | 20190119 | |
| AhnLab-V3 | 20190119 | |
| Alibaba | 20180921 | |
| ALYac | 20190119 | |
| Antiy-AVL | 20190120 | |
| Arcabit | 20190119 | |
| Avast | 20190119 | |
| Avast-Mobile | 20190118 | |
| Avira (no cloud) | 20190119 | |
| Babable | 20180918 | |
| Baidu | 20190118 | |
| BitDefender | 20190119 | |
| CAT-QuickHeal | 20190119 | |
| ClamAV | 20190119 | |
| CMC | 20190119 | |
| Comodo | 20190119 | |
| Cyren | 20190119 | |
| DrWeb | 20190119 | |
| Emsisoft | 20190119 | |
| ESET-NOD32 | 20190119 | |
| F-Prot | 20190119 | |
| F-Secure | 20190119 | |
| Fortinet | 20190119 | |
| GData | 20190119 | |
| Ikarus | 20190119 | |
| Jiangmin | 20190119 | |
| K7AntiVirus | 20190119 | |
| K7GW | 20190119 | |
| Kaspersky | 20190119 | |
| Kingsoft | 20190120 | |
| Malwarebytes | 20190119 | |
| MAX | 20190120 | |
| McAfee | 20190119 | |
| Microsoft | 20190119 | |
| eScan | 20190119 | |
| NANO-Antivirus | 20190119 | |
| Palo Alto Networks (Known Signatures) | 20190120 | |
| Panda | 20190119 | |
| Sophos AV | 20190119 | |
| SUPERAntiSpyware | 20190116 | |
| TACHYON | 20190119 | |
| Tencent | 20190120 | |
| TheHacker | 20190118 | |
| TotalDefense | 20190119 | |
| TrendMicro | 20190120 | |
| TrendMicro-HouseCall | 20190120 | |
| Trustlook | 20190120 | |
| VBA32 | 20190118 | |
| ViRobot | 20190119 | |
| Webroot | 20190120 | |
| Yandex | 20190118 | |
| Zillya | 20190118 | |
| ZoneAlarm by Check Point | 20190119 | |
| Zoner | 20190119 |
The file being studied is a Portable Executable file!
More specifically, it is a Win32 EXE
file
for the Windows GUI subsystem.
FileVersionInfo properties
Copyright
Copyright (C) Silicon Integrated Systems Corp. 1998-2004
Product SiS (R) Compatible Super VGA SiSBase Dynamic Link Library
Original name SiSBase.dll
Internal name SiSBase 3.63.01
File version 6.14.10.3630
Description SiS Compatible Super VGA SiSBase Dynamic Link Library
Comments SiS Compatible Super VGA SiSBase Dynamic Link Library
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 1994-07-09 09:45:28
Entry Point 0x00003CB0
Number of sections 10
PE sections
PE imports
Number of PE resources by type
RT_VERSION 1
Number of PE resources by language
CHINESE TRADITIONAL 1
PE resources
Debug information
ExifTool file metadata
SubsystemVersion
6.1
Comments
SiS Compatible Super VGA SiSBase Dynamic Link Library
LinkerVersion
9.0
ImageVersion
0.0
FileSubtype
0
FileVersionNumber
6.14.10.3630
LanguageCode
Chinese (Traditional)
FileFlagsMask
0x003f
FileDescription
SiS Compatible Super VGA SiSBase Dynamic Link Library
ImageFileCharacteristics
Executable, 32-bit
CharacterSet
Unicode
InitializedDataSize
139264
EntryPoint
0x3cb0
OriginalFileName
SiSBase.dll
MIMEType
application/octet-stream
LegalCopyright
Copyright (C) Silicon Integrated Systems Corp. 1998-2004
FileVersion
6.14.10.3630
TimeStamp
1994:07:09 11:45:28+02:00
FileType
Win32 EXE
PEType
PE32
InternalName
SiSBase 3.63.01
ProductVersion
6.14.10.3630
UninitializedDataSize
0
OSVersion
6.0
FileOS
Win32
Subsystem
Windows GUI
MachineType
Intel 386 or later, and compatibles
CompanyName
Silicon Integrated Systems Corporation
CodeSize
12288
ProductName
SiS (R) Compatible Super VGA SiSBase Dynamic Link Library
ProductVersionNumber
6.14.10.3630
FileTypeExtension
exe
ObjectFileType
Dynamic link library
Execution parents
File identification
MD5 213125b940b0bd9371306bb9eebd906e
SHA1 77c9085731a795376d9c33f52d1921ad3978a93f
SHA256 fd8d18817f4298a812ad130428f36ce72cba966aef7b7740a04f63ff47c21ac6
ssdeep
3072:HnruW+M+zJtJ07wVerrRixEzS96/E8ln2ODX+AmVt:Ljn24r+y1/EED
File size
144.0 KB ( 147456 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit
| TrID |
Win32 Dynamic Link Library (generic) (38.4%) Win32 Executable (generic) (26.3%) OS/2 Executable (generic) (11.8%) Generic Win/DOS Executable (11.6%) DOS Executable Generic (11.6%) |
Tags
peexe
VirusTotal metadata
First submission
2019-01-20 01:02:54 UTC ( 1 month ago )
Last submission
2019-01-20 23:49:29 UTC ( 1 month ago )
| File names |
SiSBase.dll SiSBase 3.63.01 WxTxlGZYqyyPa4pu.exe 157.exe |
Advanced heuristic and reputation engines
F-Secure Deepguard
Suspicious:W32/Malware!Online
No comments.
No VirusTotal Community member has commented on this item yet, be the first one to do so!
You have not signed in. Only registered users can leave comments, sign in and have a voice!
No votes.
No one has voted on this item yet, be the first one to do so!